“The other aspect of the reputation risk would be when and if a federal government law enforcement agency or regulator decided to take action, legal or otherwise, against that institution for that sort of activity, and that could certainly introduce some reputation risk,” he says.